Resilience of the Internet to random breakdowns 
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A common property of many large networks, including the Internet, is that the connectivity of 
the various nodes follows a scale-free power-law distribution, P(k) = ck~ a . We study the stability 
of such networks with respect to crashes, such as random removal of sites. Our approach, based on 
percolation theory, leads to a general condition for the critical fraction of nodes, p c , that need to be 
removed before the network disintegrates. We show analytically and numerically that for a < 3 the 
transition never takes place, unless the network is finite. In the special case of the physical structure 
of the Internet (a w 2.5), we find that it is impressively robust, with p c > 0.99. 
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Recently there has been increasing interest in the for- 
mation of random networks and in the connectivity of 
these networks, especially in the context of the Internet 
p|-p|,^0[. When such networks are subject to random 
breakdowns — a fraction p of the nodes and their con- 
nections are removed randomly — their integrity might 
be compromised: when p exceeds a certain threshold, 
p > Pc, the network disintegrates into smaller, discon- 
nected parts. Below that critical threshold, there still 
exists a connected cluster that spans the entire system 
(its size is proportional to that of the entire system). 
Random breakdown in networks can be seen as a case 
of infinite-dimensional percolation. Two cases that have 
been solved exactly are Cayley trees |l^] and Erdos-Renyi 
(ER) random graphs Jl^] , where the networks collapse 
at known thresholds p c . Percolation on small- world net- 
works (i.e., networks where every node is connected to its 
neighbors, plus some random long-range connections ||) 
has also been studied by Moore and Newman |ll). Al- 
bert et ai, have raised the question of random failures 
and intentional attack on networks Q . Here we consider 
random breakdown in the Internet (and similar networks) 
and introduce an analytical approach to finding the crit- 
ical point. The site connectivity of the physical struc- 
ture of the Internet, where each communication node is 
considered as a site, is power-law, to a good approxima- 
tion ffwj. We introduce a new general criterion for the 
percolation critical threshold of randomly connected net- 
works. Using this criterion, we show analytically that the 
Internet undergoes no transition under random break- 
down of its nodes. In other words, a connected cluster of 
sites that spans the Internet survives even for arbitrarily 
large fractions of crashed sites. 

We consider networks whose nodes are connected ran- 
domly to each other, so that the probability for any two 
nodes to be connected depends solely on their respec- 
tive connectivity (the number of connections emanating 



from a node). We argue that, for randomly connected 
networks with connectivity distribution P(k), the criti- 
cal breakdown threshold may be found by the following 
criterion: if loops of connected nodes may be neglected, 
the percolation transition takes place when a node (i), 
connected to a node (j) in the spanning cluster, is also 
connected to at least one other node — otherwise the 
spanning cluster is fragmented. This may be written as 



(ki\i «-» j) = ^ ki p ( k i 



(1) 



where the angular brackets denote an ensemble average, 
ki is the connectivity of node i, and P{ki\i <-> j) is 
the conditional probability that node i has connectiv- 
ity ki, given that it is connected to node j. But, by 
Bayes rule for conditional probabilities P(ki\i <-> j) = 
P(h,i «-> j)/P(i ~ j) = P(i «-> j\ki)P(ki)/P(i ~ j), 
where P(ki,i «-> j) is the joint probability that node 
i has connectivity ki and that it is connected to node 
j. For randomly connected networks (neglecting loops) 
P(i <-> j) = (k)/(N - 1) and P(i «-► j\h) = h/(N - 1), 
where N is the total number of nodes in the network. It 
follows that the criterion (|l|) is equivalent to 



(k) 



= 2, 



(2) 



at criticality. 

Loops can be ignored below the percolation transition, 
k < 2, because the probability of a bond to form a loop 
in an s-nodes cluster is proportional to (s/N) 2 (i.e., pro- 
portional to the probability of choosing two sites in that 
cluster) . The fraction of loops in the system Pi oop is 
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where the sum is taken over all clusters, and Si is the size 
of the ith cluster. Thus, the overall fraction of loops in 
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the system is smaller than S/N, where S is the size of 
the largest existing cluster. Below criticality S is smaller 
than order N (for ER graphs S is of order InJV |l3||), so 
the fraction of loops becomes negligible in the limit of 
N — » oo. Similar arguments apply at criticality. 

Consider now a random breakdown of a fraction p 
of the nodes. This would generically alter the connec- 
tivity distribution of a node. Consider indeed a node 
with initial connectivity ko, chosen from an initial dis- 
tribution P(ko). After the random breakdown the dis- 
tribution of the new connectivity of the node becomes 
3 )(1 — p) k p k °~ k , and the new distribution is 



fko\ 



P'(k)= £p(Ad)(7)(l-p)V 
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(4) 



(Quantities after the breakdown are denoted by a prime.) 
Using this new distribution one obtains (fc)' = {k )(l —p) 
and (k 2 )' = (k 2 )(l—p) 2 + (k Q )p(l—p), so the criterion (g) 
for criticality may be re-expressed as 



iMl(l- Pc )+ Pc = 2, 
(«o) 



(5) 



yielding K w mN 1 ^ a ~ 1 \ (For the Internet, m = 1 and 
K « iV 2 / 3 .) For the sake of generality, below we consider 
a range of variables, a > 1 and 1 < m <C K, The key 
parameter, according to (^), is the ratio of second- to 
first-moment, Ko, which we compute by approximating 
the distribution (0) to a continuum (this approximation 
becomes exact for 1 <C m <C if , and it preserves the 
essential features of the transition even for small to): 
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K 2 ~ a 



(9) 



When K ^> m, this may be approximated as: 
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if a > 3; 
if 2 < a < 3; 
if 1 < a < 2. 



(10) 



or 



1 —p c 



kq - 1 ' 



(6) 



where ko = (k 2 ) / (ko) is computed from the original dis- 
tribution , before the random breakdown. 

Our discussion up to this point is general and applica- 
ble to all randomly connected networks, regardless of the 
specific form of the connectivity distribution (and pro- 
vided that loops may be neglected). For example, for 
random (ER) networks, which possess a Poisson connec- 
tivity distribution, the criterion (||) reduces to a known 
result jl3| that the transition takes place at (k) = 1. In 
this case, random breakdown does not alter the Poisson 
character of the distribution, but merely shifts its mean. 
Thus, the new system is again an ER network, but with 
new effective parameters: fc e g = k(l— p), N e g = NCL—p). 
In the case of Cayley trees, the criteria (||) and (|J) also 
yield the known exact results |fl2| . 

The case of the Internet is thought to be different. It 
is widely believed that , to a good approximation, the 
connectivity distribution of the Internet nodes follows a 
power-law |14| : 



P(k) = ck- a , k = m,m + l,...,K, 



(7) 



where a ~ 5/2, c is an appropriate normalization con- 
stant, and to is the smallest possible connectivity. In a 
finite network, the largest connectivity, K, can be esti- 
mated from 
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(8) 



We see that for a > 3 the ratio kq is finite and there 
is a percolation transition at 1 — p c = (§E§ m ~ l) : 
for p > p c the spanning cluster is fragmented and the 
network is destroyed. However, for a < 3 the ratio kq di- 
verges with K and so p c — » 1 when K — > oo (or N — > oo). 
The percolation transition does not take place: a span- 
ning cluster exists for arbitrarily large fractions of break- 
down, p < 1. In finite systems a transition is always 
observed, though for a < 3 the transition threshold is 
exceedingly high. For the case of the Internet (a ~ 5/2), 
we have kq » K 1 / 2 w N 1 / 3, . Considering the enormous 
size of the Internet, N > 10 6 , one needs to destroy over 
99% of the nodes before the spanning cluster collapses. 

The transition is illustrated by the computer simula- 
tion results shown in Fig. [I], where we plot the frac- 
tion of nodes which remain in the spanning cluster, 
-Poo (p)/ Poo (0), as a function of the fraction of random 
breakdown, p, for networks with the distribution (R). For 
a = 3.5, the transition is clearly visible: beyond p c rj 0.5 
the spanning cluster collapses and Poo (p) /Poo (0) is nearly 
zero. On the other hand, the plots for a = 2.5 (the case of 
the Internet) show that although the spanning cluster is 
diluted asp increases (Poo (p) /-Poo (0) becomes smaller), it 
remains connected even at near 100% breakdown. Data 
for several system sizes illustrate the finite-size effect: the 
transition occurs at higher values of p the larger the sim- 
ulated network. The Internet size is comparable to our 
largest simulation, making it remarkably resilient to ran- 
dom breakdown. 
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FIG. 1. Percolation transition for networks with 

power-law connectivity distribution. Plotted is the fraction 
of nodes that remain in the spanning cluster after breakdown 
of a fraction p of all nodes, P^ (p)/ P x (0), as a function of p, 
for a — 3.5(crosses) and a = 2.5 (other symbols), as obtained 
from computer simulations of up to N — 10 . In the former 
case, it can be seen that for p > p c « 0.5 the spanning cluster 
disintegrates and the network becomes fragmented. However, 
for a = 2.5 (the case of the Internet), the spanning cluster 
persists up to nearly 100% breakdown. The different curves 
for K = 25 (circles), 100 (squares), and 400 (triangles) illus- 
trate the finite size-effect: the transition exists only for finite 
networks, while the critical threshold p c approaches 100% as 
the networks grow in size. 

We have introduced a general criterion for the collapse 
of randomly connected networks under random removal 
of their nodes. This criterion, when applied to the In- 
ternet, shows that the Internet is resilient to random 
breakdown of its nodes: a cluster of interconnected sites 
which spans the whole Internet becomes more dilute with 
increasing breakdowns, but it remains essentially con- 
nected even for nearly 100% breakdown. The same is 
true for other networks whose connectivity distribution 
is approximately described by a power-law, as in Eq. (]?]), 
as long as a < 3. 
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